Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/QyAfz4geCX1yAcW6jviQmMEcokw.roa
File: QyAfz4geCX1yAcW6jviQmMEcokw.roa (raw, json)
Hash identifier: ZOZoxi88efBUS+00uBxru+5yNMcWvLwQYQzpqkSTx9M=
Subject key identifier: 43:20:1F:CF:88:1E:09:7D:72:01:C5:BA:8E:F8:90:98:C1:1C:A2:4C
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 0199DE100FB50CBF4A65761B1F10E03995F5
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/QyAfz4geCX1yAcW6jviQmMEcokw.roa
Signing time: Mon 13 Oct 2025 14:53:38 +0000
ROA not before: Mon 13 Oct 2025 14:53:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 212.134.180.0/22 maxlen: 22
212.134.184.0/22 maxlen: 22
212.134.192.0/22 maxlen: 22
212.134.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:de:10:0f:b5:0c:bf:4a:65:76:1b:1f:10:e0:39:95:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 13 14:53:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43201fcf881e097d7201c5ba8ef89098c11ca24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:da:1e:3f:c2:49:0e:80:66:98:27:12:ce:9f:
3c:e3:77:d6:9b:f8:c4:49:0f:7f:42:d4:ac:70:0e:
30:5a:77:bd:68:47:af:29:2b:26:87:bd:40:e8:bb:
a9:86:8a:1b:8b:05:30:b1:b5:9e:2a:91:90:41:52:
04:b8:c0:6b:39:04:9a:32:1a:4d:c7:56:2a:87:c9:
d9:78:f1:8f:da:37:b9:00:03:ad:6d:54:b8:e0:ec:
4f:c1:49:c5:b0:ca:72:7a:d0:24:74:3c:78:4a:8a:
d7:cb:90:e5:68:0a:a7:69:6c:44:12:0a:d3:e4:75:
9b:ee:c9:4a:a1:c0:2c:93:fd:ad:bc:fd:fd:67:cc:
9f:f7:1a:09:c8:4b:df:0b:8b:61:c6:28:d3:33:17:
49:20:26:28:0e:04:4e:c9:a4:e2:0d:1e:73:63:b3:
ba:a0:7b:ca:d9:d6:b5:fb:db:70:43:f3:28:80:c2:
80:74:3f:85:f8:39:1a:3b:93:26:33:4d:7c:b7:0b:
9c:51:f7:23:50:26:97:3b:2d:b3:d9:ab:e4:d3:1e:
81:4b:99:8a:04:6d:da:cd:78:3e:02:67:44:b9:12:
ee:44:ac:3d:90:a4:94:72:d4:7e:de:7e:c2:34:7b:
c9:5a:71:5d:64:9b:58:c6:c4:3e:93:26:80:53:05:
e8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:20:1F:CF:88:1E:09:7D:72:01:C5:BA:8E:F8:90:98:C1:1C:A2:4C
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/QyAfz4geCX1yAcW6jviQmMEcokw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.134.180.0-212.134.187.255
212.134.192.0/22
212.134.200.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:b7:80:1e:b7:e7:a6:4b:27:6f:e0:50:b5:e4:0e:3c:58:ad:
63:d1:b9:65:ef:f0:9c:1f:4a:9a:8a:a2:68:28:ae:4b:c3:b9:
8a:f0:cc:d8:e4:5b:19:02:93:43:22:43:e4:c3:2e:d6:52:07:
dd:00:4d:8e:3a:85:68:f6:49:02:54:3c:1a:38:22:ba:78:d0:
73:df:60:51:ca:5d:99:33:f7:a3:94:64:2c:48:39:09:1c:c9:
9d:98:44:09:44:fe:11:2c:7c:f9:85:9b:9f:e2:3a:c9:65:89:
41:c0:c7:3e:b4:77:e4:e4:6c:27:46:4c:85:8e:71:b4:9a:45:
e8:73:53:99:0f:60:a8:b5:2c:e9:13:05:e0:8c:21:23:05:98:
2a:83:f3:c4:81:ca:eb:b3:8f:cd:60:32:3b:a9:c3:4a:e0:f3:
86:f6:f4:4d:dd:02:01:8d:e4:81:a3:f4:6d:5c:9e:94:5d:fa:
83:fb:e3:ce:fb:30:2d:56:fc:f8:23:cb:c3:5b:fd:28:06:6f:
dc:39:27:6a:89:49:09:33:c9:fd:02:d4:21:02:c3:5f:87:8b:
cd:ed:29:e5:36:6e:12:b3:c1:61:15:02:b5:e2:b1:80:e2:89:
fd:5b:fd:47:10:66:a7:27:9a:dd:9f:ee:89:fc:05:ee:ef:11:
f6:f3:1e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:03 2025 by rpki-client